Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
File: XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft (raw, json)
Hash identifier: LkuZM1OGA8NBq9kY1vKblxmAAo/70WlP1djw2Zk4Ovc=
Subject key identifier: 6B:7B:B1:F6:8E:1D:AA:38:E5:76:C2:82:2D:DE:94:3C:68:70:EE:1E
Authority key identifier: 5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
Certificate issuer: /CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Certificate serial: 0198564571831045163E0FECCB25C896FBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
Manifest number: 0301
Signing time: Tue 29 Jul 2025 13:00:48 +0000
Manifest this update: Tue 29 Jul 2025 13:00:48 +0000
Manifest next update: Wed 30 Jul 2025 13:00:48 +0000
Files and hashes: 1: XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl (hash: JqBF0GY6hjtfVk2I4gW5MrgIQnX6AZZAt3WL4mYm4QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:71:83:10:45:16:3e:0f:ec:cb:25:c8:96:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Validity
Not Before: Jul 29 13:00:48 2025 GMT
Not After : Jul 30 13:00:48 2025 GMT
Subject: CN=6b7bb1f68e1daa38e576c2822dde943c6870ee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:0f:c4:ba:8f:35:77:eb:9e:38:a2:1a:86:
63:5e:3e:c5:86:1d:c4:fe:1d:67:aa:55:c2:6b:73:
5b:4a:ae:78:30:f3:72:9f:eb:5b:9c:ac:c8:87:74:
1c:2d:b4:c8:ea:ad:78:10:13:62:ba:d1:01:2c:b0:
05:0d:8f:d6:be:53:ae:77:84:51:2f:79:34:e5:0d:
fe:88:b4:10:46:54:73:63:9d:39:70:07:7e:3a:df:
3f:f9:87:32:00:a5:5e:85:b8:b8:70:e9:5d:d1:13:
0b:f5:2e:81:3c:ec:97:d9:2d:f3:33:c4:16:6c:b0:
92:9c:21:f7:91:e5:ba:8b:45:b0:33:3a:b3:5d:9d:
16:e1:f6:9e:72:cc:d1:77:3b:ab:90:13:34:6e:2c:
24:5e:60:9c:29:23:6b:2a:cc:32:94:89:62:fd:7a:
39:97:40:0a:9c:11:b8:59:68:4e:dd:92:87:09:73:
22:5f:be:a5:1c:75:75:bf:48:2e:5a:f2:a1:3b:b0:
83:1e:77:6b:4d:8d:69:52:7c:81:06:ea:19:07:89:
42:5e:65:77:cc:77:a2:65:2a:44:ec:33:5d:f9:1c:
48:93:09:9b:07:a9:76:16:4a:34:c0:f1:e7:76:df:
dc:bf:f8:ba:d3:79:a9:49:6e:ca:89:03:e9:f8:29:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:B1:F6:8E:1D:AA:38:E5:76:C2:82:2D:DE:94:3C:68:70:EE:1E
X509v3 Authority Key Identifier:
keyid:5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a9:3a:49:bd:a8:d0:78:cb:e9:4b:b9:8e:33:a6:17:7a:4e:
e0:2e:8c:f6:6b:db:88:f2:16:72:d2:d5:e9:36:ad:01:0b:9e:
28:9d:25:13:79:b6:41:bb:55:77:38:5c:51:e5:d3:7a:7b:cc:
75:03:9c:76:bc:9d:aa:39:68:a3:37:18:cd:25:e5:e1:a4:c6:
16:97:f0:b4:92:4b:bf:ef:c9:b3:57:c8:fb:20:5d:fb:ea:90:
f6:d1:bd:47:8f:3a:c2:62:53:6b:ed:ab:82:75:8e:7d:52:14:
6c:a5:7b:9f:c2:17:e6:2a:6f:cc:e3:36:16:16:9d:e4:e2:3a:
05:90:5b:df:80:69:bb:e2:ce:43:19:51:45:b2:c9:48:e0:ef:
7c:14:a1:27:c1:35:72:53:46:9e:bd:ee:4f:56:dc:59:5f:57:
ab:d1:2a:7f:99:44:03:cd:74:4c:80:38:85:3d:69:41:b5:c8:
a3:68:5b:89:40:a9:1d:57:78:dd:a8:51:32:3d:3f:54:df:5d:
09:15:88:96:f5:cb:5d:b4:f5:f5:24:df:dd:02:de:d6:5d:e2:
a4:02:91:ed:9e:af:15:36:fa:2e:a2:f1:57:f1:fa:92:ce:fa:
07:06:7b:8c:69:d8:fb:46:fd:04:e1:d0:1d:e7:db:a5:2c:15:
b9:96:71:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRXGDEEUWPg/syyXIlvu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZjMTM4NGI0YTRjYTUwMWRkMzNjNWYwZDg1ODBkNDQx
NmViM2EwHhcNMjUwNzI5MTMwMDQ4WhcNMjUwNzMwMTMwMDQ4WjAzMTEwLwYDVQQD
Eyg2YjdiYjFmNjhlMWRhYTM4ZTU3NmMyODIyZGRlOTQzYzY4NzBlZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1IPxLqPNXfrnjiiGoZjXj7Fhh3E
/h1nqlXCa3NbSq54MPNyn+tbnKzIh3QcLbTI6q14EBNiutEBLLAFDY/WvlOud4RR
L3k05Q3+iLQQRlRzY505cAd+Ot8/+YcyAKVehbi4cOld0RML9S6BPOyX2S3zM8QW
bLCSnCH3keW6i0WwMzqzXZ0W4faecszRdzurkBM0biwkXmCcKSNrKswylIli/Xo5
l0AKnBG4WWhO3ZKHCXMiX76lHHV1v0guWvKhO7CDHndrTY1pUnyBBuoZB4lCXmV3
zHeiZSpE7DNd+RxIkwmbB6l2Fko0wPHndt/cv/i603mpSW7KiQPp+CmNtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt7sfaOHao45XbCgi3elDxocO4eMB8GA1UdIwQY
MBaAFF3WwThLSkylAd0zxfDYWA1EFus6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85MTU3YTktMDRiMC00MWJlLTljMjQt
ZDgyZDA2YTg3YmZlLzEvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85MTU3YTktMDRiMC00MWJlLTljMjQtZDgyZDA2YTg3YmZl
LzEvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkak6Sb2o
0HjL6Uu5jjOmF3pO4C6M9mvbiPIWctLV6TatAQueKJ0lE3m2QbtVdzhcUeXTenvM
dQOcdrydqjloozcYzSXl4aTGFpfwtJJLv+/Js1fI+yBd++qQ9tG9R486wmJTa+2r
gnWOfVIUbKV7n8IX5ipvzOM2Fhad5OI6BZBb34Bpu+LOQxlRRbLJSODvfBShJ8E1
clNGnr3uT1bcWV9Xq9Eqf5lEA810TIA4hT1pQbXIo2hbiUCpHVd43ahRMj0/VN9d
CRWIlvXLXbT19STf3QLe1l3ipAKR7Z6vFTb6LqLxV/H6ks76BwZ7jGnY+0b9BOHQ
HefbpSwVuZZxxQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:14 2025 by rpki-client